TI Mindmap HUB
Threat Intelligence Report

From fake Proton VPN sites to gaming mods, this Windows infostealer is everywhere

๐Ÿ“… April 26, 2026 ๐Ÿ“ฐ www.malwarebytes.com ๐Ÿ” 0 CVE(s) referenced

The NWHStealer infostealer is being aggressively spread through convincing fake VPN sites, gaming mods, and trusted utilities across multiple platforms, enabling attackers to steal browser data, passwords, and cryptocurrency wallets from unsuspecting Windows users.

Sign in to access the full report including:
detailed analysis, IOCs, MITRE ATT&CK mapping, and STIX bundle.

๐Ÿ” Sign In to Read Full Report

You'll need to accept our Terms of Service to access the platform.

๐Ÿ“Š Visual Mindmap
๐ŸŽฏ IOC Extraction
โš”๏ธ MITRE ATT&CK TTPs
๐Ÿ“ฆ STIX 2.1 Bundle